Access to system partitions Android opens up opportunities for fine-tuning your smartphone that are not available in the standard interface. Here you can change network parameters, calibrate sensors, enable debugging functions, or even unlock hidden manufacturer options. However, not everyone knows that the path to these settings lies through special engineering menus, commands ADB or hardware key combinations.
It is important to understand: system partitions (/system, /vendor) are protected from accidental changes. Manufacturers restrict access to them to prevent damage to the firmware or disruption of the device. But if you need check hardware parameters, calibrate the screen or enable hidden functions (for example, battery diagnostics), there are legal ways to do this without obtaining root access. This article contains current methods for Android 10โ14, including devices Samsung, Xiaomi, Realme and other brands.
1. What is "System" on Android and why go there?
Partition /system in Android is a protected memory area where the following are stored:
- ๐ฑ System applications (for example,
Settings.apk,Phone.apk) - โ๏ธ Configuration files (network, sound, display settings)
- ๐ง Libraries and drivers for hardware components
- ๐ก๏ธ Policies security (permissions, certificates)
By default, the user cannot change files in this section - they are read-only (read-onlyHowever, through the engineering menus or ADB you can:
- ๐ View hidden parameters (for example, the antenna signal level in decibels)
- ๐ Test hardware components (camera, speakers, accelerometer)
- ๐ Reset sensor calibration (gyroscope, compass)
- ๐ Enable experimental functions (for example
Force 4G Onlyon some firmware)
โ ๏ธ Attention: Changing system files without understanding the consequences can lead to loss of warranty, cyclic reboot (bootloop) or locking the bootloader. On devices with Samsung Knox or Google Titan M such actions may trigger hardware security flags, which will make it impossible to use services like Samsung Pay or Google Wallet.
If your goal is just to view technical information (for example, IMEI, version of the radio module. data-i="90">battery status or battery status, it is enough to use engineering menu (Engineering Mode). For deep changes (modification of files in /system) you will need ADB or root.
2. Method 1: Engineering menu (Engineering Mode) - without a PC and root
The easiest way to access system parameters is to use hidden engineering menu. It is available on all Android devices, but the path to it depends on the manufacturer and firmware version.
For most smartphones (Xiaomi, Redmi, POCO, Realme, Oppo, Vivo), a universal code is suitable:
##4636##
After entering, a menu will open "Testing" (Testing) with tabs:
- ๐ถ Phone information (Phone Information) - network data, IMEI, signal
- ๐ Battery information (Battery Information) - charge level, temperature, voltage
- ๐ Usage statistics (Usage Statistics) - application operating time
- ๐ง Wi-Fi settings (Wi-Fi Information) - signal strength, MAC address
On devices Samsung the engineering menu opens another code:
#0#
Here you can test display (colors, touchscreen), speakers, vibration and camera.
โ ๏ธ Attention: On some firmware (for example, MIUI 14+ or One UI 6+) the engineering menu may be blocked. If nothing happens after entering the code, try using ADB (method 3) or check if access is disabled through security policies (for example, on corporate devices).
Check the real network signal level (in dBm)
Find out exact battery voltage and temperature
Test the operation of all sensors (gyroscope, illumination)
Enable debug logs to diagnose problems
-->
3. Method 2: Codes for accessing hidden menus (by brand)
Each manufacturer adds unique ones to the firmware Service codes, which provide access to different sections of the system. Below are the current combinations for popular brands (2026โ2026).
| Brand | Code | What opens |
|---|---|---|
| Samsung | *#9900# |
System logs (SysDump), tests of hardware components |
| Xiaomi/Redmi/POCO | ##6484## |
Test of hardware modules (camera, Bluetooth, GPS) |
| Realme/Oppo/OnePlus | *#808# |
Information about the firmware version, touchscreen test |
| Huawei/Honor | ##2846579## |
Design menu (ProjectMenu), network settings |
| Google Pixel | ##4636## |
Testing and debugging (similar to the standard engineering menu) |
On some devices (for example, Samsung Galaxy S23+ or Xiaomi 14 Pro) codes may not work due to security policies. In this case:
- Try entering codes through Phone application, and not through the lock screen.
- If the code does not work, check if security updateis installed that blocks engineering menus (relevant for Android 13+).
- Use
ADB(method 3) as an alternative.
What to do if the code does not work?
If after entering the code the message "Communication" appears impossible" or nothing happens, the reasons may be the following:
1. The firmware is modified (for example, custom software like LineageOS).
2. The operator has blocked access (on some branded firmware, for example, from MTS or Beeline).
3. The device is in Knox or Enterprise Mode (to Samsung).
In this case, all that remains is ADB or receiving root access.
4. Method 3: Access via ADB (for advanced users)
ADB (Android Debug Bridge) is a tool from Googlethat allows you to control the device via the PC command line. With it you can:
- ๐ View. files in
/system(without write permissions) - ๐ง Execute debugging commands (for example,
dumpsysfor diagnostics) - ๐ Reboot into recovery modes or fastboot
To get started:
- Enable Debugging via USB in the developer settings (
Settings โ About phone โ Build number(press 7 times) โFor developers โ USB debugging). - Download ADB Tools (official package from Google).
- Connect your phone to the PC and check the connection with the command:
adb devices
Examples of useful commands for accessing system information:
adb shell dumpsys battery # Battery informationadb shell dumpsys wifi # Wi-Fi information
adb shell getprop ro.build.version.sdk # Android SDK version
adb shell ls /system/app # List of system applications
โ ๏ธ Attention: Commandsadb pull /systemoradb pushto write to/systemwill not work without root access. Trying to change files in this section will result in an errorRead-only file system. Full access requires unlocking the bootloader and installation Magisk.
1. Reinstall drivers Google USB Driver.
2. Use another USB cable (preferably the original one).
3. Enable the mode Transfer files (MTP) when connecting.
-->
5. Method 4: Using applications to view system information
If you do not need deep changes, but only view system data, you can do without ADB codes. There are applications that collect information from protected sections and display it in a convenient form. The best of them:
- ๐ CPU-Z - shows detailed information about the processor, memory, sensors and battery. Free, without unnecessary water.
- ๐ DevCheck - analyzes hardware, including data about
SoC,GPUandRAM. - ๐ ๏ธ AIDA64 - professional diagnostic tool, supports performance tests.
- ๐ AccuBattery - monitors battery condition, shows actual capacity and wear.
These applications do not require root access, but some data (for example, full list of system applications or kernel log) can be hidden without additional permissions.
Example: in CPU-Z go to the tab "System"to see:
- Kernel version (
Kernel version) - Firmware version (
Build number) - Information about
SELinux(security mode)
Applications like CPU-Z or AIDA64 are safe to use since they only read system information, but do not change it. However, avoid apps that promise to โunlock hidden functions without rootโ - they often contain malicious code.
6. Method 5: Unlocking the bootloader and getting root access (for advanced)
If you need full access to the partition /system (for example, to remove system applications or modify files), you will need:
- ๐ Unlock bootloader (bootloader).
- ๐ ๏ธ Install custom recovery (for example, TWRP).
- ๐ฟ Get root access via Magisk.
The unlocking process depends on manufacturer:
- Google Pixel: officially supports unlocking via
fastboot oem unlock. - Xiaomi: requires waiting 7โ30 days after linking the account Mi.
- Samsung: unlocking the bootloader resets Knox, which voids the warranty.
- OnePlus/Realme: the process is similar Pixel, but a special utility from the manufacturer may be required.
After unlocking the bootloader and installing Magisk you will be able to:
- ๐๏ธ Delete system applications (
bloatware). - ๐ง Edit files in
/system(for example,build.propto change DPI). - ๐ Install modified firmware (custom ROMs).
โ ๏ธ Attention: Unlocking the bootloader leads to a complete data reset (wipe). In addition, on some devices (for example, Samsung s Knox or Huawei s HMSs) this may block access to banking applications Google Pay or services Samsung Pay.
What is Magisk and why is it better than SuperSU?
Magisk is a tool for obtaining root accessthat works on the principle "systemless" (does not change the section /system). This allows:
- Pass. verification SafetyNet (needed for Google Pay and banking applications).
- Install OTA updates without losing root.
- Hide root status from applications (for example, games or services like Netflix).
SuperSU outdated and not supported with Android 9+.7. Risks and how to avoid them
Working with system partitions Android always involves risks. Here are the most common problems and how to prevent them:
| Risk | Cause | How avoid |
|---|---|---|
| Bootloop (cyclic reboot) | Damage to files in /system or incompatible firmware |
Make a backup via TWRP before changes |
| IMEI blocking | Incorrect file modification /efs or /nvdata |
Do not edit these sections without knowing the structure |
| Loss of warranty | Unlocking the bootloader or trigger Knox/Titan M | Check the manufacturer's policy before unlocking |
| Broken services (Google Pay, banks) | SafetyNet does not work due to modifications | Use Magisk with the module Universal SafetyNet Fix |
If you still encounter a problem:
- ๐ Soft brick (the device turns on, but does not boot): try reflash via
fastbootor Odรญn (for Samsung). - ๐จ Hard brick (the device does not respond): you will need JTAG or contacting a service center.
- ๐ต Loss network: check the files
/efsor reflash the modem (modem.bin).
The only reliable way to bring the device back to life after unsuccessful modifications is official firmware through service manufacturer's utilities. For example, for Xiaomi this Mi Flash Tool, for Samsung โ Odรญn, for Google Pixel โ Android Flash Tool.
FAQ: Frequently asked questions about accessing System on Android
โ Is it possible to access System without root access?
Yes, but with restrictions. data-i="327">you can engineering menu or ADB Can view system information, but edit files in /system without root are not possible. The exception is some devices with an unlocked bootloader, where you can temporarily mount /system in recording mode (mount -o rw,remount /system), but this does not work on all firmware.
โ Why does the code ##4636## not work on mine phone?
Possible reasons:
- The manufacturer has blocked the code in its firmware (relevant for Samsung One UI 6+ or MIUI 14+).
- A security update has been installed that disables the engineering menus.
- The device is in corporate management (for example, through Android Enterprise).
Solution: try ADB or specialized applications like MTK Engineering Mode (for chips MediaTek).
โ How can I get everything back if I break something?
Rollback methods:
- ๐ Reset to factory settings (if the problem is in the settings, not in the system files).
- ๐ฅ Flashing via fastboot (if the device is still turns on).
- ๐ง JTAG or service center (if the device does not respond).
Always keep a backup TWRP or original firmware before experiments!
โ Is it possible to increase the speaker volume through System?
Technically, yes, but this risky. The file /system/etc/mixer_paths.xml (or similar) stores volume limits:
- โ ๏ธ Exceeding limits can burn out the speaker.
- ๐ On some devices (for example, Samsung) these files are protected Knox.
- ๐ง It is better to use equal settings (EQ) in applications like ViPER4Android.
โ How to check if access to the System is blocked?
Try the command:
adb shell mount | grep system
If there is ro (read-only) in the output, then write to the section is locked. If rw โ the section is available for changes (rare on stock firmware).